'''Warning:''' This password method may not work with [t:TracModPython mod_python] due to a [http://tjulo.blogspot.com/2007/03/problems-with-md5-and-modpython.html bug using Python's md5 module under mod_python]. If you experience problems try [t:TracFastCgi FastCGI], [t:wiki:TracModWSGI mod_wsgi], or [t:TracStandalone tracd].

102

'''Warning:''' This password method may not work with [t:TracModPython mod_python] due to a [http://tjulo.blogspot.com/2007/03/problems-with-md5-and-modpython.html bug using Python’s md5 module under mod_python]. If you experience problems try [t:TracFastCgi FastCGI], [t:wiki:TracModWSGI mod_wsgi], or [t:TracStandalone tracd].

'''Warning:''' This password method may not work with [t:TracModPython mod_python] due to a [http://tjulo.blogspot.com/2007/03/problems-with-md5-and-modpython.html bug using Python's md5 module under mod_python]. If you experience problems try [t:TracFastCgi FastCGI], [t:wiki:TracModWSGI mod_wsgi], or [t:TracStandalone tracd].

134

'''Warning:''' This password method may not work with [t:TracModPython mod_python] due to a [http://tjulo.blogspot.com/2007/03/problems-with-md5-and-modpython.html bug using Python’s md5 module under mod_python]. If you experience problems try [t:TracFastCgi FastCGI], [t:wiki:TracModWSGI mod_wsgi], or [t:TracStandalone tracd].

'''New for Trac 0.10:''' When used in combination with the [wiki:AccountManagerPlugin#LoginModule LoginModule] it adds a link to the login page "Forgot your password?" where users can reset their password if they've forgotten it. You will need to have your SMTP server information configured in your {{{trac.ini}}} for the "Forgot your password?" link to show up.

236

'''New for Trac 0.10:''' When used in combination with the [wiki:AccountManagerPlugin#LoginModule LoginModule] it adds a link to the login page “Forgot your password?” where users can reset their password if they’ve forgotten it. You will need to have your SMTP server information configured in your {{{trac.ini}}} for the “Forgot your password?” link to show up.

237

237

238

238

[[Image(reset-password.png)]]

239

239

240

'''New for Trac 0.11:''' When a user resets their password they will be required to change their password on the next successful login. This can be disabled via the `trac.ini` by setting `force_passwd_change = false`

240

'''New for Trac 0.11:''' When a user resets their password they will be required to change their password on the next successful login. This can be disabled via the `trac.ini` by setting `force_passwd_change = false`.

Allows users to login via a HTML form instead of using HTTP authentication.

248

248

249

In order to use this plugin you will need to disable the default Trac login module:

250

{{{

251

[components]

252

trac.web.auth.LoginModule = disabled

253

acct_mgr.web_ui.LoginModule = enabled

254

}}}

255

256

You will also need to '''remove''' any authentication methods on the "login" page from your Apache configuration that you may have set up during cgi or mod_python setup, e.g., look for and remove something like the following lines

257

{{{

258

<Location /trac/myproject/login>

259

AuthType Basic

260

AuthName "Bio Scripts Trac Login"

261

AuthUserFile /path/to/trac.htpasswd

262

Require valid-user

263

</Location>

264

}}}

265

266

249

[[Image(login-form.png)]]

267

250

268

251

==== Disable HTTP authentication ====

269

252

270

To use the AccountManager's form-based login system instead, add this to the

271

"`[components]`" section of your trac.ini:

253

To use the AccountManager’s form-based login system instead, add this to the

When using the [trac:TracStandalone tracd] server be sure '''not''' to use the "`--auth`" or "`--basic-auth`" options. Using either of these options will cause tracd to popup the username/password dialog box and you will not be able to use the HTML form.

260

When using the [trac:TracStandalone tracd] server be sure '''not''' to use the `--auth` or `--basic-auth` options. Using either of these options will cause tracd to popup the username/password dialog box and you will not be able to use the HTML form.

278

261

279

262

If you have previously enabled authentication for Trac on Apache, you will need to disable it or Apache will popup the username/password dialog and you will be unable to use the HTML form. In order to disable the authentication look for a section in the Apache configuration file like:

Deleting or commenting the `Require valid-user` line should be sufficient to disable HTTP authentication. After you've tested it you can probably delete or comment out the rest of the authentication options.

271

Deleting or commenting the `Require valid-user` line should be sufficient to disable HTTP authentication. After you’ve tested it you can probably delete or comment out the rest of the authentication options.

289

272

290

273

=== !RegistrationModule ===

291

274

'''Package''':: acct_mgr.web_ui

292

275

293

Enables users to register a new account. It adds a "Register" link on the same menu bar as the "Login" link.

276

Enables users to register a new account. It adds a “Register” link on the same menu bar as the “Login” link.

'''Warning:''' You must enable one of the above password storage modules for the Registration Module to work.

304

287

[[html(</div>)]]

305

'''Note:''' You must not enable `ignore_auth_case` in `trac.ini` as otherwise this module wont work.

288

'''Note:''' You must not enable `ignore_auth_case` in `trac.ini` as otherwise this module won’t work.

306

289

307

290

== Post Setup/Configuration ==

308

291

309

In order to use the Account Manager plugin, while logged in as a user with TRAC_ADMIN rights, use the new "Admin" link on the menubar.

310

311

Once in, you might want to enable the permissions to allow the "authenticated" user group permissions. For instance, if you remove the anonymous group from TICKET_MODIFY, and WIKI_MODIFY, and add the "authenticated" group instead, only authenticated, logged-in (registered) users can perform ticket modifications and wiki editing.

292

In order to use the Account Manager plugin, while logged in as a user with TRAC_ADMIN rights, use the new “Admin” link on the menubar.

293

294

Once in, you might want to enable the permissions to allow the “authenticated” user group permissions. For instance, if you remove the anonymous group from TICKET_MODIFY, and WIKI_MODIFY, and add the “authenticated” group instead, only authenticated, logged-in (registered) users can perform ticket modifications and wiki editing.